Printer.c logic for printing RET_FUN closures is incorrect
Printer.c
has a magic +2 offset which is used when printing a RET_FUN
stack frame. However, this doesn't point into the right place and subsequently the printing logic prints out the fun
field as the first value. Subsequently the last value in the bitmap is also omitted due to this off-by-one error.
For inspiration you can look in Scav.c
for how to properly do it, by using the pointer in the payload
field.